2 matches found
Cross site scripting
A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...
6.2AI score0.00429EPSS
SaveExploits0References1
CVE-2024-26467: Improper Neutralization of Input During Web Page Generation
A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...
6.1CVSS6AI score0.00429EPSS
SaveExploits0References2
20